
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
File: FGK93WyF9js9vnfnrIVJwm_m8-w.mft (raw, json)
Hash identifier: QcNNYqwj3DW9FnbG9BxNGKYs43BBqTTc32fzkOySSQ4=
Subject key identifier: 5E:87:38:81:6A:DD:D6:65:93:FB:F5:24:F9:13:34:77:35:E6:5E:74
Authority key identifier: 14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC
Certificate issuer: /CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
Certificate serial: 0199228CF88DD4DBDB1304020D9DE8BBE337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
Manifest number: 115F
Signing time: Sun 07 Sep 2025 05:01:27 +0000
Manifest this update: Sun 07 Sep 2025 05:01:27 +0000
Manifest next update: Mon 08 Sep 2025 05:01:27 +0000
Files and hashes: 1: FGK93WyF9js9vnfnrIVJwm_m8-w.crl (hash: SVFntJifG0bR56g7bnWer3okbWwH6KvazJdF1KoUPAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f8:8d:d4:db:db:13:04:02:0d:9d:e8:bb:e3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
Validity
Not Before: Sep 7 05:01:27 2025 GMT
Not After : Sep 8 05:01:27 2025 GMT
Subject: CN=5e8738816addd66593fbf524f913347735e65e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:70:1f:61:6e:7c:e4:33:b9:18:9b:a0:48:
e4:71:20:41:36:0c:23:7f:39:ec:3d:34:97:47:4c:
14:fe:fc:c4:94:6c:53:cd:f6:b6:21:36:65:f9:c7:
3f:52:e0:61:2d:ae:1a:75:54:96:ec:b8:77:ac:b6:
2d:96:f4:73:7b:6c:b9:11:3e:0a:2b:49:de:fd:b4:
1d:28:7b:3e:fc:1a:7e:4a:64:3d:c9:a2:1e:84:b9:
f6:fe:93:ab:f3:ba:ac:7b:fa:24:70:5d:70:2f:0d:
72:88:56:e4:e9:22:1c:a1:82:02:4c:2d:ac:c1:ef:
12:71:b3:08:eb:a1:c7:67:89:9a:2f:e2:cc:da:8b:
cd:39:d4:a9:f8:d4:51:fd:09:5e:e2:ed:c7:8e:f5:
60:53:9a:45:e7:31:77:75:ca:e2:a6:ab:a9:7e:b0:
cd:37:86:b9:08:58:93:a7:3d:9b:ef:6b:be:a4:3f:
2b:42:f4:b8:e2:8d:83:a6:97:cf:61:a3:88:9d:a0:
4c:37:87:55:bf:6c:79:1d:20:a8:c0:14:eb:6d:41:
9b:71:f2:17:ad:b0:03:bf:87:0e:01:15:1e:14:2c:
8f:a7:28:d0:a8:6a:ff:a4:9a:d2:ae:93:53:48:41:
8d:af:c3:67:56:39:a1:40:cc:d9:c2:51:06:5e:39:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:87:38:81:6A:DD:D6:65:93:FB:F5:24:F9:13:34:77:35:E6:5E:74
X509v3 Authority Key Identifier:
keyid:14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:66:9b:db:3d:6e:b0:6a:45:89:0d:dc:26:5e:d4:7e:c1:9d:
c9:08:3c:49:d7:ce:81:d4:1e:98:a4:0f:1f:2e:82:da:62:06:
11:46:16:8b:96:4f:75:14:a9:f6:83:0d:65:d1:3e:61:52:28:
72:5c:94:db:26:fa:a2:2b:3d:d5:b4:16:a7:ca:45:6c:a3:9c:
bc:bf:4b:22:18:1e:ae:b7:26:0b:6e:88:8f:bf:20:09:f7:fa:
94:6a:01:34:ac:ba:1a:a5:ae:b1:36:2c:d1:9e:19:a0:ea:e7:
e7:90:05:5b:d0:2a:93:02:7d:b5:38:14:83:02:cb:1a:27:ef:
38:d3:48:49:85:9e:0a:38:1c:01:b5:d0:ee:84:19:65:f6:0a:
f0:12:ca:bf:01:f9:20:38:79:30:ff:71:1a:12:c3:cc:dc:56:
09:e5:b2:af:60:35:83:24:b2:43:4f:53:f4:6a:42:2b:d3:19:
35:1d:a0:cf:65:ce:75:f8:c8:52:ca:62:56:a2:7a:d3:d5:a2:
33:07:6c:d7:5e:fa:cd:10:72:40:cf:10:57:ee:1c:7f:60:4c:
fd:ff:77:18:37:b4:c2:20:36:ba:0e:e4:cf:69:c9:c3:a8:24:
19:bd:ad:5f:49:14:c0:75:3d:80:67:63:69:e1:99:e6:8a:e8:
48:27:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:09 2025 by rpki-client